Ketamine Charting and DEA Compliance: EMR Guide (Sep 2026)
Ketamine clinic compliance starts with your EMR. Cover DEA inventory logs, session charting, EPCS, and PDMP requirements in September 2026.
TL;DR
5 key points- 01Ketamine's Schedule III status means your EMR must log every dose against a perpetual inventory, with unannounced DEA inspections a real possibility
- 02DEA registration attaches to each location where ketamine is stored or administered, so multi-location practices need segregated controlled substance records per registered site in their EMR
- 03Incomplete session notes are among the most common ketamine enforcement findings; your EMR must require structured fields before a note can be signed
- 04Native EPCS and PDMP integration are baseline EMR requirements for ketamine clinics, not optional features to weigh later
- 05Decoda Health's inventory management ties each administered dose directly to the patient record, covering the perpetual log architecture DEA compliance requires
Why Ketamine Clinic Documentation Is Uniquely High-Stakes
Ketamine therapy sits at an unusual intersection: a Schedule III controlled substance administered off-label, paid for out-of-pocket, in a largely unregulated clinic environment. That combination puts documentation at the center of every compliance risk a practice carries.
The U.S. ketamine clinic market grew to over 1,500 clinics by 2024, and regulators have responded by auditing treatment plans, supervision, and marketing without waiting for prospective rules to catch up. Enforcement is defining the standard of care, which means your records are the evidence.
A documentation gap at a med spa might mean a billing dispute. At a ketamine clinic, it can mean a DEA audit, a board complaint, or malpractice exposure. Because most ketamine infusions are off-label, no insurer is reviewing your charts as a backstop. Your EMR is the only record proving a licensed physician supervised the encounter, that consent was obtained, and that the controlled substance was properly accounted for.
What Schedule III Classification Requires From Your EMR
The DEA classifies ketamine as a Schedule III controlled substance, defined as a drug with moderate to low potential for physical and psychological dependence, with abuse potential less than Schedule I and II but greater than Schedule IV. That classification determines what your EMR must capture.
Schedule III substances can be prescribed with refills authorized for up to six months, unlike Schedule II drugs, which require a new prescription for every dispensing. That flexibility comes with a tradeoff: your records must show, at any point during an audit, that every dose administered was physician-ordered, patient-specific, documented, and matched against your controlled substance inventory.
DEA Registration and the Per-Location Record-Keeping Obligation
DEA registration for ketamine attaches to the location, not only to the prescriber. A separate registration is required at each principal place of business where the drug is stored, dispensed, or administered, so ketamine facilities require their own DEA registration in addition to - not instead of - the registration each practitioner holds to prescribe or administer Schedule III substances.
For multi-location practices, each registered facility carries its own inventory records, dispensing logs, and administration documentation. An EMR that pools controlled substance data across locations instead of segregating it by facility creates an audit problem. When a DEA inspector arrives at your second location, they need records tied to that site, not a combined report requiring manual sorting to untangle.
Controlled Substance Inventory Tracking: What Your EMR Must Log
DEA-registered ketamine clinics must maintain a perpetual inventory log, with a physical count conducted at least biennially. Each log entry must capture the lot number, expiration date, quantity received, quantity administered per patient, any waste with a witnessed signature, the date, and the staff member responsible. Your EMR should close the loop between what arrived and what was given. Med spa injectable inventory tracking leaves no gap for a manual spreadsheet to quietly absorb.
The DEA may conduct unannounced inspections of registered clinics to audit controlled substance inventories. Unexplained discrepancies between received and administered quantities are the specific trigger for investigative referrals. An EMR that links each infusion dose to a patient chart, timestamps the administration, and flags remaining stock after every session gives you the reconciliation trail an inspector expects to see on arrival.
Intake Documentation Before the First Infusion
A ketamine intake record carries more legal weight than a standard new-patient form. Because every infusion is off-label, the intake documentation is the clinical justification for treatment. If a malpractice claim or board complaint follows an adverse event reporting situation, the intake record is the first thing reviewed.
Before a first infusion, your EMR must capture:
- Full psychiatric and medical history, including prior diagnoses, hospitalizations, and current medications
- Screening for contraindications such as uncontrolled hypertension, active psychosis, or substance use disorders
- Baseline vitals: heart rate, blood pressure, and pulse oximetry
- Documentation of prior treatment trials when treatment-resistant depression is the indication
- Dated informed consent with patient and clinician signatures
Pre-dose documentation standards require baseline vitals, a medication review, and a substance use screen before the session begins. Your EMR should enforce this sequence, not simply provide fields for it.
What Every Per-Session Chart Note Must Capture
Each infusion session generates its own documentation burden. A note that says "patient tolerated ketamine infusion well" is a liability gap, not a clinical record.
Per-session chart notes must include:
- Pre-dose baseline vitals (heart rate, blood pressure, pulse oximetry)
- Recent substance use screen and medication review
- Dose administered, route, rate, and duration
- Real-time monitoring observations throughout the infusion
- Any adverse events, with response documented
- Post-dose recovery observation until clinically stable
- After-care instructions delivered to the patient
Incomplete session notes are among the most common findings in ketamine enforcement actions. Regulators reviewing a course of treatment expect structured data across every session, much like the structured capture regulators expect in any enforcement-reviewed clinical record. Your EMR must make this structured capture the default path, with required fields that cannot be bypassed before a note is signed, so the workflow itself removes the discretion that creates gaps.
Documentation Element | When Captured | Why It Matters for Compliance |
|---|---|---|
Baseline vitals (HR, BP, SpO2) | Pre-dose | Documents clinical justification and screens for contraindications (e.g., uncontrolled hypertension) |
Substance use screen & medication review | Pre-dose | Required safety check before administering a Schedule III controlled substance |
Dose, route, rate, and duration | At administration | Feeds the perpetual inventory reconciliation DEA inspectors audit |
Real-time monitoring observations | During infusion | Confirms physician or clinical staff supervision throughout the session |
Adverse events & clinical response | During/post infusion | Required for adverse event logs and board-level accountability |
Post-dose recovery observation | Post infusion | Documents clinical stability before patient discharge |
After-care instructions delivered | At discharge | Supports an informed discharge standard and reduces liability exposure |
Informed Consent as a Permanent Clinical Record
Informed consent for ketamine therapy is a clinical record with legal standing, and your EMR needs to treat it as one.
Because consent doubles as the clinical justification record for an off-label treatment, it must carry more detail than a standard procedure consent. At minimum, it must document the indication, whether use is on-label or off-label, expected therapeutic goals, potential benefits alongside clinical uncertainties, and specific risks including dissociation, sedation, blood pressure elevations, nausea, cognitive effects, and misuse potential.
Storage, Signatures, and Version Control
Once signed, that record belongs in the patient's chart with a full audit trail. Dated signatures from both patient and clinician, with a witness when required, must live in the EHR. For telemedicine encounters, compliant e-signature tools with identity verification are required. A PDF attachment with no timestamp does not meet that bar.
If your protocols change, the version a patient originally signed must remain retrievable alongside later versions. An EMR that overwrites consent records or stores only the most recent version creates an evidentiary gap precisely where you need a clean chain of documentation.
HIPAA Safeguards That Ketamine Clinics Cannot Delegate to Their EMR Alone
Ketamine clinics that transmit electronic billing or eligibility data are typically covered entities under HIPAA, with a PHI footprint spanning EHR entries, dosing logs, vitals, telehealth recordings, and remote monitoring data collected between sessions. That scope runs wider than most elective-care practices carry.
Your EMR must support role-based access controls so front desk staff cannot open infusion notes, and audit logs that record every chart view, edit, or export without manual reconstruction. What your EMR cannot do is write your Notice of Privacy Practices, train your staff, or sign a Business Associate Agreement on your behalf. Every vendor touching patient data requires a signed BAA before any PHI flows through their system, and missing BAAs rank among the most cited findings in HIPAA investigations. Practices using compounded ketamine carry additional 503A pharmacy documentation obligations.
EPCS and PDMP: Two EMR Capabilities That Are Often Non-Negotiable
When a ketamine clinic prescribes for take-home use, paper prescriptions for Schedule III substances create a documentation gap that is difficult to defend in an audit. EPCS and PDMP checks belong in the patient record alongside clinical justification, dosing limits, refill authorization, and follow-up scheduling.
PDMP check requirements vary by state, but the direction of travel is clear: more states are mandating checks before any controlled substance is prescribed, opioids included. An EMR without native PDMP integration pushes clinicians into a separate state portal, with no automatic documentation that the check occurred. That manual step is where compliance gaps form.
For take-home ketamine, an EMR that lacks native EPCS support forces a workaround: print, sign, and hand over a paper script. That breaks the chain of custody documentation your DEA registration depends on. Treat both capabilities as baseline requirements when reviewing any ketamine clinic EMR, not optional add-ons.
The Evolving State-Level Regulatory Environment
Federal DEA obligations set the floor. State medical boards are raising it.
The Texas Medical Board published proposed regulations in January 2026 that would create the Texas ketamine clinic regulatory framework under Chapter 173, Subchapter B, introducing mandatory clinic registration and enhanced monitoring standards. Documentation requirements flowing from rules like these include mandatory registration attestations, adverse event logs tied to specific patient records, and per-patient diagnostic documentation proving clinical justification for each course of treatment.
The regulatory direction across jurisdictions is consistent: prescriptive, clinic-specific, and documentation-heavy. When a state board issues new guidance, intake forms, session notes, and consent workflows may need to change within weeks. Practices that adapt fastest run configurable documentation systems where updating a required field is an administrative action, not a development request.
How Decoda Health Supports Ketamine and High-Risk Elective Care Practices
Ketamine practices carry the documentation load described throughout this post, and the software layer underneath that work either holds up or creates the gaps regulators find.
Decoda Health supports high-risk payment processing for ketamine, alongside peptides, semaglutide, and TRT/HRT. Payment processors freezing funds mid-cycle is a real business risk for practices in this category, and Decoda Health's payment infrastructure is built to handle it without the workarounds most practices currently rely on.
For session charting, the AI Scribe with ambient listening and custom SOAP templates handles the per-session documentation burden without requiring providers to type while monitoring a patient in dissociation. Intake and consent forms are dispatched to the patient's phone before arrival through the Forms and Consents module, so ketamine-specific screening and signature capture happen before anyone walks through the door. Role-based access controls restrict sensitive clinical dose records by staff role, and native EPCS support is available for controlled substance prescribing.
Inventory management tracks usage down to the unit, tying each administered dose directly to the patient record. Each entry is timestamped and staff-attributed inside the same system that runs scheduling and clinical notes, giving inspectors the reconciliation trail without manual reconstruction.
Decoda Health clinic partners see an average 70% reduction in call volume and an 80% reduction in check-in time, which frees clinical staff for the hands-on monitoring ketamine sessions demand.
Final Thoughts on EMR Requirements for Ketamine Clinic Compliance
Ketamine documentation is not something you can patch together with separate tools and spreadsheets, and the regulatory direction makes that clearer every year. Your EMR either builds compliance into the workflow or leaves your team to fill the gaps manually. If you want to walk through how Decoda Health supports this, grab a time here.
Frequently Asked Questions
What does a ketamine clinic EMR need to capture that a standard medical spa EMR does not?
Ketamine clinic documentation requirements go well beyond standard elective care charting because every infusion involves a Schedule III controlled substance administered off-label. Your EMR must maintain a perpetual controlled substance inventory log tied to individual patient records, capture structured per-session vitals and monitoring observations with required fields that cannot be bypassed before signing, store versioned informed consent records with full audit trails, and support EPCS for take-home prescribing. A general medical spa EMR typically handles none of these natively.
What does a DEA audit of a ketamine clinic actually look at, and how should my EMR be set up to survive one?
DEA inspectors reviewing a ketamine clinic's controlled substance records look for a reconcilable chain from received quantity to each administered dose, including lot numbers, expiration dates, waste documentation with witnessed signatures, and timestamps on every administration tied to a specific patient chart. Your EMR needs to close that loop automatically at the point of treatment documentation, not through a separate spreadsheet. Each registered location must carry its own segregated inventory records, so a multi-location system that pools controlled substance data across addresses creates an audit problem before an inspector opens a single file.
How do I set up HIPAA-compliant access controls for ketamine infusion records in my EMR?
Role-based access controls should restrict clinical dose records and infusion notes to licensed clinical staff, keeping front desk and administrative roles out of sensitive chart data entirely. Every chart view, edit, and export should generate an automatic audit log entry without manual reconstruction. The EMR handles access architecture, but it cannot write your Notice of Privacy Practices, train your staff on PHI handling, or execute Business Associate Agreements with the other vendors touching patient data. Those tasks sit outside the software and missing BAAs are among the most cited findings in HIPAA investigations.
Best ketamine clinic EMR for Schedule III controlled substance compliance and session charting?
The core capabilities to look for are native perpetual inventory tracking linked to patient records, per-session required-field enforcement that cannot be bypassed before a note is signed, versioned consent storage with full audit trails, native EPCS, and PDMP integration that documents the check inside the patient chart rather than in a separate portal. Decoda Health covers those workflows natively, including ambient AI session documentation via AI Scribe that handles infusion charting without requiring the provider to type while monitoring a patient, and inventory tracking that ties each administered dose directly to the chart.
Can I use the same EMR for ketamine documentation requirements and standard med spa services, or do I need separate systems?
A single system works if it supports role-based permissions granular enough to separate controlled substance records from aesthetic charting, per-location DEA inventory segregation for multi-site practices, and procedure-specific documentation forms that enforce the structured capture ketamine requires. Practices running both service lines on separate systems face a data fragmentation problem: two patient records, two billing workflows, and no unified view of the patient's clinical history across their care.
How does an AI-native EMR handle controlled substance documentation for ketamine differently than a traditional EMR with an added compliance module?
An AI-native system builds the perpetual inventory log, required-field enforcement, and per-session charting into the same workflow the provider uses at the chair — so the documentation happens as a byproduct of care, not as a separate administrative step afterward. A traditional EMR with a bolted-on compliance module typically still relies on a clinician to remember to open a second screen, fill out a parallel form, and manually reconcile dose records against inventory. That manual step is exactly where the gaps regulators find during ketamine enforcement reviews originate.
What is the difference between a patient-specific order and a standing order for ketamine, and which does DEA compliance require?
DEA compliance for Schedule III substances requires a patient-specific order — a documented, physician-authorized instruction tied to a named patient's chart for each course of treatment. Standing orders, which authorize a category of action across multiple patients without individual physician sign-off at each session, do not satisfy the per-patient documentation standard that DEA inspections look for in ketamine records. Your EMR should enforce this by requiring a provider-signed order linked to the patient's record before any dose can be logged against your controlled substance inventory.
How should waste documentation work in a ketamine clinic EMR to satisfy DEA requirements?
Every instance of wasted ketamine — whether from a partially used vial or a dose adjustment mid-infusion — must be recorded with the quantity wasted, the date, and a witnessed signature from a second staff member present at the time of disposal. Your EMR should capture this at the point of treatment documentation, not as a retroactive entry. A waste log that lives in a separate spreadsheet and gets reconciled at month-end is a chain-of-custody gap; inspectors expect the witnessed waste record to be tied to the specific patient session where the waste occurred.
Can a ketamine clinic use a general-purpose EHR like eClinicalWorks or a hospital-focused system for Schedule III EMR compliance, or does it create gaps?
General-purpose and hospital-focused EHRs were architected for insurance-billed, multi-specialty care and typically lack native perpetual controlled substance inventory tracking linked to individual patient dose records. Ketamine clinics using those systems commonly end up managing DEA inventory reconciliation in a parallel spreadsheet, which means the chain of custody between what was received, what was administered, and what was wasted is never in one auditable place. A Schedule III controlled substance EMR built for elective care closes that gap by design, with dose logging, session charting, and inventory deduction happening in a single workflow.
How does an AI scribe handle ketamine session charting without the provider needing to type while monitoring a patient in dissociation?
An ambient AI scribe listens to the session environment and generates a structured draft note in real time, capturing clinical observations, vitals entries, and monitoring notes without the provider holding a keyboard. Decoda Health's AI Scribe supports custom SOAP templates, so the required fields specific to ketamine infusion documentation — pre-dose vitals, dose and rate, real-time monitoring observations, adverse events, post-dose recovery — are built into the template the scribe populates. The provider reviews and signs the completed note after the session rather than splitting attention between the patient and the chart.
What happens to my ketamine clinic's controlled substance records if I switch EMR systems mid-year during a DEA biennial inventory period?
DEA regulations require that your perpetual inventory records remain intact and accessible for at least two years from the date of each entry, which means you need a verified export of your controlled substance logs — including every dose administered, lot numbers, waste records, and biennial inventory counts — before your old system is decommissioned. Confirm that the receiving EMR can import or store those historical records in a format that remains auditable, and verify your data export format with your incoming vendor before signing a migration contract. Missing or fragmented records covering the transition window are a documented finding in post-migration DEA audits.
How does an AI-native EMR for a ketamine practice handle compliance documentation when state-level rules change and intake or consent forms need to be updated quickly?
A configurable documentation system lets you update required fields, add new intake questions, or revise consent language through an administrative action — no development ticket, no vendor queue. When Texas or another state board publishes new ketamine-specific requirements, practices running static form templates in legacy systems face weeks of manual workarounds while the vendor processes the change request. Decoda Health generates procedure-specific forms on demand and supports drag-and-drop field editing, so updating a ketamine intake form to reflect new diagnostic documentation requirements is an internal workflow step, not a support escalation.
Should a new ketamine clinic invest in a full practice management EMR from day one, or start with cheaper single-purpose tools and upgrade later?
For ketamine clinics specifically, starting with single-purpose tools creates a documentation architecture problem that grows harder to fix the longer you operate. DEA compliance requires a continuous, auditable chain connecting received inventory to each patient dose — if your inventory tool, your charting tool, and your consent management tool are three separate systems, that chain has to be manually reconstructed at audit time. Building the right architecture from the first patient session is far less expensive than reconciling two years of fragmented records when an inspector arrives or a malpractice claim is filed.
How does high-risk payment processing inside a ketamine practice management platform protect against the fund-freeze risk that standard processors create?
Standard processors like Square and Stripe categorize ketamine therapy as high-risk and can freeze or close merchant accounts without advance notice, sometimes mid-billing-cycle. A ketamine practice management platform with native high-risk payment processing — built for cash-pay wellness services including ketamine, peptides, and semaglutide — routes transactions through a processor that has already cleared these service categories, removing the freeze risk that practices running standard processors carry. Decoda Health's payment infrastructure handles this natively, which means revenue from infusion sessions is not at risk of being held pending a processor review.
What PDMP check documentation should live in my ketamine clinic EMR, and what is the risk if the check happens outside the system?
When a PDMP check is run through a separate state portal and the result is not automatically recorded in the patient's chart, there is no auditable proof inside your EMR that the check occurred before the prescription was issued. In states where PDMP checks are mandatory before prescribing any controlled substance, that missing record is a compliance gap regardless of whether the provider actually ran the check. An EMR with native PDMP integration documents the check result inside the patient record at the moment it occurs, so the evidence of compliance lives where the prescription lives — in the same chart a DEA inspector or board reviewer will open.